CVE-2022-1355
Summary
| CVE | CVE-2022-1355 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-08-31 16:15:00 UTC |
|---|
| Updated | 2023-02-23 15:52:00 UTC |
|---|
| Description | A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Debian -- Security Information -- DSA-5333-1 tiff |
DEBIAN |
www.debian.org |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| LibTIFF: Multiple Vulnerabilities (GLSA 202210-10) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| 2074415 – (CVE-2022-1355) CVE-2022-1355 libtiff: stack-buffer-overflow in tiffcp.c in main() |
MISC |
bugzilla.redhat.com |
|
| August 2022 LibTIFF Vulnerabilities in NetApp Products | NetApp Product Security |
CONFIRM |
security.netapp.com |
|
| tiffcp: avoid buffer overflow in "mode" string (fixes #400) (!323) · Merge requests · libtiff / libtiff · GitLab |
MISC |
gitlab.com |
|
| AddressSanitizer: stack-buffer-overflow /home/lin/Downloads/libtiff/tools/tiffcp.c:289 in main (#400) · Issues · libtiff / libtiff · GitLab |
MISC |
gitlab.com |
|
| [SECURITY] [DLA 3278-1] tiff security update |
MLIST |
lists.debian.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160245 Oracle Enterprise Linux Security Update for libtiff (ELSA-2022-7585)
- 160275 Oracle Enterprise Linux Security Update for libtiff (ELSA-2022-8194)
- 181488 Debian Security Update for tiff (DLA 3278-1)
- 181520 Debian Security Update for tiff (DSA 5333-1)
- 184544 Debian Security Update for tiff (CVE-2022-1355)
- 198944 Ubuntu Security Notification for LibTIFF Vulnerabilities (USN-5619-1)
- 240843 Red Hat Update for libtiff (RHSA-2022:7585)
- 240881 Red Hat Update for libtiff (RHSA-2022:8194)
- 282854 Fedora Security Update for libtiff (FEDORA-2022-ea3ebeff3d)
- 282867 Fedora Security Update for libtiff (FEDORA-2022-e9fe21d102)
- 354139 Amazon Linux Security Advisory for libtiff : ALAS2-2022-1891
- 354256 Amazon Linux Security Advisory for libtiff : ALAS-2022-1644
- 354326 Amazon Linux Security Advisory for libtiff : ALAS2022-2022-194
- 354416 Amazon Linux Security Advisory for libtiff : ALAS2022-2022-094
- 354431 Amazon Linux Security Advisory for libtiff : ALAS2022-2022-183
- 354588 Amazon Linux Security Advisory for libtiff : ALAS-2022-194
- 355159 Amazon Linux Security Advisory for libtiff : ALAS2023-2023-050
- 671860 EulerOS Security Update for libtiff (EulerOS-SA-2022-1900)
- 671884 EulerOS Security Update for libtiff (EulerOS-SA-2022-1937)
- 671945 EulerOS Security Update for libtiff (EulerOS-SA-2022-1971)
- 671946 EulerOS Security Update for libtiff (EulerOS-SA-2022-2001)
- 671995 EulerOS Security Update for libtiff (EulerOS-SA-2022-2161)
- 671996 EulerOS Security Update for libtiff (EulerOS-SA-2022-2136)
- 672225 EulerOS Security Update for libtiff (EulerOS-SA-2022-2621)
- 710659 Gentoo Linux LibTIFF Multiple Vulnerabilities (GLSA 202210-10)
- 940761 AlmaLinux Security Update for libtiff (ALSA-2022:7585)
- 940811 AlmaLinux Security Update for libtiff (ALSA-2022:8194)
- 960178 Rocky Linux Security Update for libtiff (RLSA-2022:7585)
